FDEunlock introduction
(GitLab CI) - 
(Travis CI) - 
- 
FDEunlock – Check and unlock full disk encrypted systems via ssh
This script allows you to unlock full disk encrypted GNU/Linux systems via ssh after checking that the system has not been tampered with.
Usage example
Checkout the following example:
fdeunlock --host fde-server.example.org-initramfs INFO, 2017-03-29 10:27:41,822: Host offline. Attempting to start using: virsh -c qemu:///system start fde-server Domain fde-server started INFO, 2017-03-29 10:27:42,726: Start command returned with: 0 INFO, 2017-03-29 10:27:48,257: Host offline. Waiting … INFO, 2017-03-29 10:27:53,264: Ping result: 198.51.100.23 : [0], 84 bytes, 0.51 ms (0.51 avg, 0% loss) INFO, 2017-03-29 10:27:53,270: Running Network based checkers: LinkLayerAddressChecker, UnauthenticatedLatencyChecker INFO, 2017-03-29 10:27:53,273: Link layer address matches the trusted once. INFO, 2017-03-29 10:27:53,283: ICMP ping round trip time: 0.7300 ms INFO, 2017-03-29 10:27:53,283: Latency is within the boundaries. INFO, 2017-03-29 10:27:54,296: SSH session to initramfs established. INFO, 2017-03-29 10:27:54,296: Running SSH based checkers: ChecksumChecker, AuthenticatedLatencyChecker INFO, 2017-03-29 10:27:57,487: Checksums match the trusted once. INFO, 2017-03-29 10:27:57,559: Latency to execute a command over SSH and get the response back: 71.6000 ms INFO, 2017-03-29 10:27:57,560: Trusted latency: 60.256694030762 INFO, 2017-03-29 10:27:57,560: Current latency: 71.61283493041992 Choose one of 'save', 'ignore' (for current run) or anything else to exit: save INFO, 2017-03-29 10:28:02,739: All 4 checks passed. INFO, 2017-03-29 10:28:02,820: Passing key for vda3_crypt to host fde-server.example.org-initramfs. INFO, 2017-03-29 10:28:05,140: Could not retrieve key for vdb3_crypt (host fde-server.example.org-initramfs). Please enter key for vdb3_crypt (or store it in a vault): INFO, 2017-03-29 10:28:28,155: Passing key for vdb3_crypt to host fde-server.example.org-initramfs. INFO, 2017-03-29 10:28:43,322: System should be booting now.
The host fde-server.example.org-initramfs was defined in the ssh configuration ~/.ssh/config and the key for vda3_crypt was provided in /home/user/.config/fdeunlock/keys/fde-server.example.org-initramfs_vda3_crypt.key. And last but not least, the start command was configured in /home/user/.config/fdeunlock/config.cfg.
Repositories
Documentation
License
1 maintainer
Metadata
1 maintainer
Release files for fdeunlock 0.7.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| fdeunlock-0.7.1-py3-none-any.whl | Python 3 | none | any | Details |
Release files / fdeunlock-0.7.1-py3-none-any.whl
| Download URL | fdeunlock-0.7.1-py3-none-any.whl |
|---|---|
| Size | 18.6 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
5fc408db041d4972c8b67e42e2f60282acda05289b5bb9e43858930e42914cef
|
|
BLAKE2b-256 checksum How to use checksums |
f9d074779ac54293dafb83107410575dca71809725559a2d00de39d54bc6e1e8
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
No |
Security for fdeunlock 0.7.1
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
No provenance found
None of the files in this release were uploaded with provenance metadata.
A note on package security
PyPI is a repository for distributing packages, not a service for auditing them. While third-party security researchers and our staff do their best to detect and remove malicious packages, PyPI cannot guarantee the quality, security or suitability of any given package.
To learn more about protecting yourself from malicious actors, visit our package security documentation.
